Skip to content

Bump svgo and @wordpress/scripts in /web/wp-content/plugins/buttons-with-expiry#1125

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/wp-content/plugins/buttons-with-expiry/multi-aee5563070
Open

Bump svgo and @wordpress/scripts in /web/wp-content/plugins/buttons-with-expiry#1125
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/wp-content/plugins/buttons-with-expiry/multi-aee5563070

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor

Bumps svgo to 3.3.4 and updates ancestor dependency @wordpress/scripts. These dependencies need to be updated together.

Updates svgo from 2.8.0 to 3.3.4

Release notes

Sourced from svgo's releases.

v3.3.4

What's Changed

Security

Support

SVGO v3 is not officially supported, please consider upgrading to SVGO v4 instead. We've backported this fix as there are security implications, but there is no commitment to do this for more complex changes in future.

Consider reading our Migration Guide from v3 to v4 which should ease the process.

v3.3.3

What's Changed

Dependencies

  • Migrates from our unsupported fork of sax (@​trysound/sax) to the upstream version of sax (sax).

Bug Fixes

  • No longer throws error when encountering comments in DTD.

Metrics

Before and after of the browser bundle of each respective version:

v3.3.2 v3.3.3 Delta
svgo.browser.js 910.9 kB 912.9 kB ⬆️ 2 kB

Support

SVGO v3 is not officially supported, please consider upgrading to SVGO v4 instead. We've backported this fix as there are security implications, but there is no commitment to do this for more complex changes in future.

Consider reading our Migration Guide from v3 to v4 which should ease the process.

v3.3.2

Notice

An update on what happened with v3.3.0 and v3.3.1. While we have retained CJS support, the migration to ESM has changed the acceptable ways to import SVGO, in ways that users depended on before. This effectively made SVGO v3 a breaking change.

Rather than resolve or workaround these differences, we've opted to release SVGO v3.3.2, which is effectively a revert to v3.2.0, and deprecate versions v3.3.0 and v3.3.1. We'll then proceed to work on releasing v4 which will document the breaking changes, and feature further breaking changes that were slated for v4, like disabling removeViewBox by default.

Before the v4.0.0 release, I'll put more focus on testing and use release candidates, just to make the release go smoothly! 👍🏽

Sorry for the headache, and thank you for your patience.

v3.3.1

... (truncated)

Commits
  • 72a2388 Merge commit from fork
  • bbab162 deps: upgrade to sax v1.5.0
  • c4dc2be chore: increment version to v3.3.2
  • 252b28c chore: increment version to 3.2.0 (#1919)
  • 8644cf3 feat(convertPathData): convert c to q (#1892)
  • 2661dac fix(convertTransform): fix scale and rotate on skew + refactors (#1916)
  • f6a2ca2 chore: improve jest tests with more precise assertions (#1912)
  • db05c57 chore: Use idiomatic Jest patterns to assert exceptions (#1909)
  • 433dcef refactor(convertPaths): clean up plugin (#1913)
  • f238d6a feat(convertPathData): allow converting q to t in more cases (#1889)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by sethiii, a new releaser for svgo since your current version.


Updates @wordpress/scripts from 20.0.2 to 33.0.0

Release notes

Sourced from @​wordpress/scripts's releases.

23.6.0

Changelog

Features

Post Editor

  • Allow setting viewport tablet and mobile values in theme.json. (79104)
  • Experimental: Expand DataForm inspector to patterns. (79452)
  • Notes: Add @​mention autocomplete. (79604)
  • Notes: Inline (partial-text) notes via hybrid marker + strip-on-render approach. (78218)
  • Show the admin bar in the Post and Site Editor by default. (79197)

Block Editor

  • Share block-bindings context assembly between call sites. (79855)

Data Layer

  • Blocks: Add innerContent support for static inner blocks, adopt it in the HTML block. (79115)

Components

  • DataViews: Add a richtext control backed by a private RichTextControl shell in @​wordpress/components. (78471)

Block Library

  • Icons: Add PHP method(s) for rendering inline SVG icons from the registry. (78332)

Enhancements

  • CSS: Follow-up fixes to split_selector_list(). (79723)
  • Document widget relevance, help. (80007)
  • Expose widget category through the build pipeline and REST API. (79638)
  • Omnibar: Move the 'site icon in admin bar' feature from experiment to 7.1 compat. (79807)
  • Scripts: Make 'test-e2e' run Playwright and remove Puppeteer. (80058)
  • Site Editor v2 experiment: Hide admin bar in distraction-free mode. (79937)
  • Widget Dashboard: Remove layout-settings editing. (79903)
  • Widget Dashboard: Reserve paint space for tile focus rings. (79990)
  • Widget Primitives: Add WidgetAttributeField for typed attribute schemas. (79544)
  • Widgets: Add a declarative help metadata field, surfaced as a header infotip. (79830)
  • Widgets: Add attribute relevance and inline editing in the tile toolbar. (79735)
  • Widgets: Translate title, description, and keywords server-side. (79701)

Block Library

  • Accordion block: Add background gradient support. (79840)
  • Add ariaLabel supports for Tab List Block. (79948)
  • Add icon state classes to Accordion block. (74257)
  • Add layout and block spacing support to Latest Posts block. (77989)
  • Add option to exclude current post from query block. (64916)
  • Animated GIF to video conversion (via mediabunny). (78410)
  • Classic block: Remove migration notice and restore inserter availability. (79894)
  • Cover: Allow restricting video embed providers. (80092)
  • File Block: Deduplicate the file to audio/video/image transforms. (80158)

... (truncated)

Changelog

Sourced from @​wordpress/scripts's changelog.

33.0.0 (2026-07-14)

Breaking Changes

  • The test-e2e command now runs the Playwright-based end-to-end test runner instead of Puppeteer (test-playwright remains available as an alias). Removed the Puppeteer test environment and configuration (jest-environment-puppeteer, jest-e2e.config.js, puppeteer.config.js) along with the puppeteer-core and expect-puppeteer dependencies. Puppeteer-specific options (e.g. --puppeteer-interactive, --puppeteer-devtools) are no longer supported (#60357).

Enhancements

  • Widen React peer dependency ranges to ^18 || ^19 to support both React 18 and React 19 environments (#80024).
  • Update stylelint to ^16.26.1 (#79648).
  • Widen the @playwright/test peer dependency to >=1 and mark it optional, so consumers aren't forced to bump Playwright or satisfy it under strict peer deps (#78632).
  • Update webpack-dev-server to ^5.2.1, resolving several Dependabot security alerts and migrating the internal dev-server proxy config to the v5 array format (#80347).

32.6.0 (2026-07-01)

32.5.0 (2026-06-24)

Enhancements

  • lint-style: Detect .cjs and .mjs config files so the bundled default config is not used when one of these is present (#79226).

32.4.1 (2026-06-16)

32.4.0 (2026-06-10)

32.3.0 (2026-05-27)

32.2.0 (2026-05-14)

32.1.0 (2026-04-29)

32.0.0 (2026-04-15)

Breaking Changes

  • The bundled eslint dependency has been upgraded from v8 to v10 (#76654).
  • The lint-js script now uses flat config (eslint.config.*) by default. Legacy .eslintrc.* files are still detected as a fallback, but this support is deprecated and will be removed in a future version (#76654).
  • The default config shipped with wp-scripts has changed from config/.eslintrc.js to config/eslint.config.cjs (#76654).

31.8.0 (2026-04-01)

31.7.0 (2026-03-18)

31.6.0 (2026-03-04)

31.5.0 (2026-02-18)

31.4.0 (2026-01-29)

31.3.0 (2026-01-16)

... (truncated)

Commits
  • e9a74f9 chore(release): publish
  • 2a0c375 Update changelog files
  • e61c854 Merge changes published in the Gutenberg plugin "release/23.6" branch
  • 1055a35 Update changelog files
  • 8ca3e8e Merge changes published in the Gutenberg plugin "release/23.6" branch
  • 66c8050 Fix wp/latest release metadata (#79821)
  • d0d1bfc Update changelog files
  • 66315f3 Merge changes published in the Gutenberg plugin "release/23.5" branch
  • 74218a2 Update changelog files
  • 504adfc Revert "Update changelog files"
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [svgo](https://github.com/svg/svgo) to 3.3.4 and updates ancestor dependency [@wordpress/scripts](https://github.com/WordPress/gutenberg/tree/HEAD/packages/scripts). These dependencies need to be updated together.


Updates `svgo` from 2.8.0 to 3.3.4
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v2.8.0...v3.3.4)

Updates `@wordpress/scripts` from 20.0.2 to 33.0.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/scripts/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/scripts@33.0.0/packages/scripts)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 3.3.4
  dependency-type: indirect
- dependency-name: "@wordpress/scripts"
  dependency-version: 33.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants